The problem then is someone on your network who has access to the server...
recommend locking down access (remove "Everyone" group and audit all file creation activities?) until you track it down... I just don't have the Security chops to be able to tell you exactly how...
maybe you can sms or gpo the latest av signatures to everyone...
JTB
Have Certs, Will Travel
"A knight without armour in a [cyber] land."
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.